fixinator-github-action

Github Action to run a Fixinator Security Scan on your ColdFusion / CFML source code (cfm, cfc files).

Example Usage

Add the following to your Github Actions Workflow yaml file:

jobs:
  fixinator:
    runs-on: ubuntu-latest
    steps: 
    - uses: actions/checkout@v2
    - name: Fixinator Security Scan 
      uses: foundeo/fixinator-github-action@master
      with:
        fixinator_api_key: ${{ secrets.FIXINATOR_API_KEY }}

Note you will need to setup a Secret containing your Fixinator API key in Github settings for your project.

Inputs

The following inputs can be specified in the with node:

`fixinator_api_key`

This should be a valid fixinator_api_key. To obtain a trail key, visit: https://fixinator.app/try/

`path`

By default scans the entire repository. You can specify a folder path, a file path or a file globber pattern.

`confidence`

Filter the results by the confidence level. By default it runs in high confidence mode, so only reports on issues it is highly confident are a security concern. You can set it to low or medium to see more results.

`severity`

The minimum severity level to show in the results. By default it is set to low but if you only want to see high severity issues, then set it to high.

`ignorePaths`

A file globber pattern of paths to ignore from the scan.

`failOnIssues`

By default the action will fail if it finds any issues. You can set it to false to prevent it from failing when it finds issues.